{"id":"CVE-2026-103098","revision":"fda68ff39b2a4d6daf0ef01eab3bb4b4","records":[{"revision":"fda68ff39b2a4d6daf0ef01eab3bb4b4","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2026-103098","aliases":[],"title":"GV-Eye Sensitive information exposure in URL query parameter Vulnerability","description":"Transmission of a sensitive key in the URL\nover an unencrypted HTTP connection.\u00A0 The\nrequest is sent over HTTP rather than HTTPS, meaning the key is transmitted in\nplaintext across the network. An attacker with the ability to monitor network\ntraffic could intercept the request and obtain the key","state":0,"publishedAt":"2026-10-02T00:15:17.848+00:00","modifiedAt":"2026-10-02T18:19:15.437+00:00","affected":[{"ecosystem":"Vendor product","name":"tw.com.geovision.gveye","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"GeoVision Inc.\",\n                    \"product\": \"GV-Eye\",\n                    \"platforms\": [\n                        \"Android\"\n                    ],\n                    \"packageName\": \"tw.com.geovision.gveye\",\n                    \"versions\": [\n                        {\n                            \"status\": \"affected\",\n                            \"version\": \"V3.6.0\"\n                        },\n                        {\n                            \"status\": \"unaffected\",\n                            \"version\": \"V3.7.2\"\n                        }\n                    ],\n                    \"defaultStatus\": \"unaffected\"\n                }"}],"metrics":[{"system":"CVSS 3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","score":7.5,"severity":"HIGH"}],"references":["https://www.geovision.com.tw/cyber_security.php"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-103098","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-103098","identifiers":["CVE-2026-103098"]},"retained":false,"historicalAffected":[]}],"coverage":[]}